Configuring User Encryption 205

To enable PSK authentication, use the following command:

set service-profile name auth-psk {enable disable}

To enable PSK authentication in service profile wpa, type the following command:

23x0# set service-profile wpa auth-psk enable

success: change accepted.

Configuring a Global PSK Passphrase or Raw Key for All Clients

To configure a global passphrase for all WPA clients, use the following command:

set service-profile name psk-phrase passphrase

The passphrase must be exactly 63 characters long, including blanks. If you use blanks, you must enclose the string in quotation marks.

To configure service profile wpa to use passphrase 1234567890123<>?=+&% The quick brown fox jumps over the lazy sl, type the following command:

23x0# set service-profile wpa psk-phrase "1234567890123<>?=+&% The quick brown fox jumps over the lazy sl"

success: change accepted.

As an alternative to entering a passphrase, which WSS Software converts into a key, you can enter the key itself in raw hexadecimal format. To enter a PSK key in raw format, use the following command:

set service-profile name psk-raw hex

For hex, type a 64-bit ASCII string representing a 32-digit hexadecimal number. Enter the two-character ASCII form of each hexadecimal number.

Examples To configure service profile wpa to use a raw PSK with PSK clients, type a command such as the following:

23x0# set service-profile wpa psk-raw c25d3fe4483e867d1df96eaacdf8b02451fa0836162e758100f5f6b87965e59d

success: change accepted.

Disabling 802.1X Authentication for WPA

To disable 802.1X authentication for WPA clients, use the following command:

set service-profile name auth-dot1x {enable disable}

Note. This command does not disable 802.1X authentication for non-WPA clients.

To disable WPA authentication in service profile wpa, type the following command:

23x0# set service-profile wpa auth-dot1x disable

success: change accepted.

Nortel WLAN Security Switch 2300 Series Configuration Guide

Page 205
Image 205
Nortel Networks 2300 manual Set service-profile name auth-psk enable disable, 23x0# set service-profile wpa auth-psk enable